1.2 ZENworks Configuration Management

1.2.1 Mobile Management

  • Factory Reset Protection of work-managed Android devices: In this release, ZENworks enables you to prevent users from factory resetting their work managed devices from Settings. You can also whitelist one or more corporate unlock accounts that need to be authenticated before the device will continue with Setup, in case of unauthorized factory resets, such as, from bootloader or fastboot.

    For more information, see Enabling Factory Reset Protection on Android Work-Managed Devices in the ZENworks 2017 Mobile Management Reference.

  • Additional information on Android bundles: The App Details section within the Android Bundles Summary page has been enhanced to include additional information, such as, the app version and track, and the last published date.

  • Additional information on Device Summary: The Device Information page of Android devices now includes additional software details such as the security patch level applied on the device. This information can also be viewed in the generated mobile inventory reports.

    For more information, see Viewing Device Information in the ZENworks 2017 Mobile Management Reference.

  • Deprecation of the Device Admin API: With this release, ZENworks has stopped support for the basic mode of enrollment that uses the Device Admin API, for Android devices. This comes after Google’s announcement to deprecate the Device Admin API from the Android P release. ZENworks will now support only two ways of enrollment for Android devices; the work profile mode and the work-managed device mode.

    For more information, see https://www.novell.com/communities/coolsolutions/removal-device-admin-api-android-devices/.

  • Restart Android mobile devices: You can now restart Android work managed devices by using the existing Restart/Shutdown quick task.

    For more information, see Reboot or Shutdown Devices in theZENworks 2017 Mobile Management Reference.

  • Support for Direct Boot: In this release, ZENworks supports Direct Boot for Android 7.0+ devices. This feature enables the ZENworks Agent to always be active on an Android device even before the device is unlocked. Administrators can enforce policies such as the Compliance policy, remove the Work Profile or factory reset the device, even if the device has not been unlocked.

  • Distribution of iOS enterprise apps: Using the existing Bundles feature, ZENworks now lets you distribute custom in-house apps that are not publicly available for distribution, to iOS devices.

    For more information, see Distributing iOS Enterprise Apps in the ZENworks 2017 Mobile Management Reference.

  • Distribution of Wi-Fi configuration using bundles: This feature enables administrators to create and deploy Wi-Fi Profile bundles on users’ devices, thereby enabling the users to connect their devices to the corporate network, using the specified wi-fi configuration. This feature is available for both, Android and iOS devices.

    For more information, see Distributing Corporate Wi-Fi Settings in the ZENworks 2017 Mobile Management Reference.

  • Office 365 Android App Protection policy: ZENworks now enables you to secure Android apps built using the Intune SDK (for example, Microsoft Office 365 apps), without users having to enroll their devices in ZENworks.

    For more information, see Creating the App Protection Policy (Android Intune App Protection Policy) in the ZENworks 2017 Mobile Management Reference.

  • Sync between ZENworks and Azure: This feature enables administrators to configure a schedule to sync the ZENworks Intune App Protection policy with Microsoft Azure.

    For more information, see Policy Sync Schedule in theZENworks 2017 Mobile Management Reference.

  • Support for new Android restrictions: The list of Android restrictions have been significantly enhanced for both Android work profile and work managed devices (including Android P devices). These restrictions include settings such as enabling device keyguard features, mounting of physical external media, sharing of data using NFC beam and restricting OS updates.

    For more information, see Section 12.5.2 Applying Device Restrictions in the ZENworks 2017 Update 4 Mobile Management Reference.

  • Support for new iOS 12 restrictions and DEP settings:

  • Remotely reset the password on Android 8.0+ devices: The Unlock device quick task, enables you to remotely reset the password and set a new password on Android 8.0+ devices, in case the user forgets the existing password of the device.

    For more information, see Unlocking a Device in the ZENworks 2017 Mobile Management Reference

  • Auto-fill credentials on ZENworks app using QR code: The ZENworks app login screen is enhanced to include a icon that will enable the user to scan the QR code to automatically fill the login credentials. On tapping this icon, the user needs to scan the QR code embedded within the received Invite Letter, after which the user is re-directed to the app and the login credentials (excluding the password) is automatically filled.

    For more information, see Enrolling Mobile Devices in the ZENworks 2017 Mobile Management Reference.

  • Audit of Wipe Device Actions of Intune App Protected devices: Administrators can now configure the change events for users to audit the initiation of the Intune App Wipe action.

  • Update to the Apps Catalog page: The Apps Catalog page now includes apps that are created using the iOS App Bundles and iOS Enterprise apps.

    For more information, on all the mobile management features, see the ZENworks 2017 Mobile Management Reference.

1.2.2 Client Management

    • Locate Windows 10 devices from the Geolocation tab: This ZENworks feature uses the Windows 10 location service to geographically locate devices that operate on Windows 10 version 1709 and later Windows 10 operating systems. You can access the Geolocation tab when you click a workstation device link.

    • Wipe a Windows device using a new quick task: The new Wipe quick task resets the selected Window device’s operating system to its factory settings and removes all non-OS files and applications from the device. You can implement the quick task when you have a Windows device selected in the Workstations list. This feature is only supported for Windows 10 devices.

    • New Installation Schedules in Bundles: With the new bundle installation schedule, you can now define the date and time when bundles should be installed on managed devices.

    • Ability to check for processes or services that are running on a managed device: Within a ZENworks bundle, it is now possible to add a requirement to check for processes or services that are running on a managed device.

    • Change in Java distribution: In this release, Java software distribution will be through Zulu, an open source platform. The Java distribution change has been introduced to enable ZENworks to provide security fixes on a more regular basis. The new JDK platform will be installed automatically on all Primary Servers, Satellites and agents when ZENworks 2017 Update 4 is deployed in the zone.